CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0160

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.945

EPSS Ranking 100.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

Proposed Action

The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.

Ransomware Campaign

Unknown

References

Products affected by CVE-2014-0160

Broadcom » Symantec Messaging Gateway » Version: 10.6.0

cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.0
Broadcom » Symantec Messaging Gateway » Version: 10.6.1

cpe:2.3:a:broadcom:symantec_messaging_gateway:10.6.1
Filezilla-Project » Filezilla Server » Version: 0.9.21

cpe:2.3:a:filezilla-project:filezilla_server:0.9.21
Filezilla-Project » Filezilla Server » Version: 0.9.22

cpe:2.3:a:filezilla-project:filezilla_server:0.9.22
Filezilla-Project » Filezilla Server » Version: 0.9.26

cpe:2.3:a:filezilla-project:filezilla_server:0.9.26
Filezilla-Project » Filezilla Server » Version: 0.9.27

cpe:2.3:a:filezilla-project:filezilla_server:0.9.27
Filezilla-Project » Filezilla Server » Version: 0.9.28

cpe:2.3:a:filezilla-project:filezilla_server:0.9.28
Filezilla-Project » Filezilla Server » Version: 0.9.29

cpe:2.3:a:filezilla-project:filezilla_server:0.9.29
Filezilla-Project » Filezilla Server » Version: 0.9.30

cpe:2.3:a:filezilla-project:filezilla_server:0.9.30
Filezilla-Project » Filezilla Server » Version: 0.9.31

cpe:2.3:a:filezilla-project:filezilla_server:0.9.31
Filezilla-Project » Filezilla Server » Version: 0.9.32

cpe:2.3:a:filezilla-project:filezilla_server:0.9.32
Filezilla-Project » Filezilla Server » Version: 0.9.33

cpe:2.3:a:filezilla-project:filezilla_server:0.9.33
Filezilla-Project » Filezilla Server » Version: 0.9.34

cpe:2.3:a:filezilla-project:filezilla_server:0.9.34
Filezilla-Project » Filezilla Server » Version: 0.9.35

cpe:2.3:a:filezilla-project:filezilla_server:0.9.35
Filezilla-Project » Filezilla Server » Version: 0.9.36

cpe:2.3:a:filezilla-project:filezilla_server:0.9.36
Filezilla-Project » Filezilla Server » Version: 0.9.37

cpe:2.3:a:filezilla-project:filezilla_server:0.9.37
Filezilla-Project » Filezilla Server » Version: 0.9.38

cpe:2.3:a:filezilla-project:filezilla_server:0.9.38
Filezilla-Project » Filezilla Server » Version: 0.9.39

cpe:2.3:a:filezilla-project:filezilla_server:0.9.39
Filezilla-Project » Filezilla Server » Version: 0.9.40

cpe:2.3:a:filezilla-project:filezilla_server:0.9.40
Filezilla-Project » Filezilla Server » Version: 0.9.41

cpe:2.3:a:filezilla-project:filezilla_server:0.9.41
Filezilla-Project » Filezilla Server » Version: 0.9.42

cpe:2.3:a:filezilla-project:filezilla_server:0.9.42
Filezilla-Project » Filezilla Server » Version: 0.9.43

cpe:2.3:a:filezilla-project:filezilla_server:0.9.43
Filezilla-Project » Filezilla Server » Version: 0.9.6

cpe:2.3:a:filezilla-project:filezilla_server:0.9.6
Mitel » Micollab » Version: 6.0

cpe:2.3:a:mitel:micollab:6.0
Mitel » Micollab » Version: 7.0

cpe:2.3:a:mitel:micollab:7.0
Mitel » Micollab » Version: 7.1

cpe:2.3:a:mitel:micollab:7.1
Mitel » Micollab » Version: 7.2

cpe:2.3:a:mitel:micollab:7.2
Mitel » Micollab » Version: 7.3

cpe:2.3:a:mitel:micollab:7.3
Mitel » Micollab » Version: 7.3.0.104

cpe:2.3:a:mitel:micollab:7.3.0.104
Mitel » Mivoice » Version: 1.1.2.5

cpe:2.3:a:mitel:mivoice:1.1.2.5
Mitel » Mivoice » Version: 1.1.3.3

cpe:2.3:a:mitel:mivoice:1.1.3.3
Mitel » Mivoice » Version: 1.2.0.11

cpe:2.3:a:mitel:mivoice:1.2.0.11
Mitel » Mivoice » Version: 1.3.2.2

cpe:2.3:a:mitel:mivoice:1.3.2.2
Mitel » Mivoice » Version: 1.4.0.102

cpe:2.3:a:mitel:mivoice:1.4.0.102
Openssl » Openssl » Version: 1.0.1

cpe:2.3:a:openssl:openssl:1.0.1
Openssl » Openssl » Version: 1.0.1a

cpe:2.3:a:openssl:openssl:1.0.1a
Openssl » Openssl » Version: 1.0.1b

cpe:2.3:a:openssl:openssl:1.0.1b
Openssl » Openssl » Version: 1.0.1c

cpe:2.3:a:openssl:openssl:1.0.1c
Openssl » Openssl » Version: 1.0.1d

cpe:2.3:a:openssl:openssl:1.0.1d
Openssl » Openssl » Version: 1.0.1e

cpe:2.3:a:openssl:openssl:1.0.1e
Openssl » Openssl » Version: 1.0.1f

cpe:2.3:a:openssl:openssl:1.0.1f
Redhat » Gluster Storage » Version: 2.1

cpe:2.3:a:redhat:gluster_storage:2.1
Redhat » Storage » Version: 2.1

cpe:2.3:a:redhat:storage:2.1
Redhat » Virtualization » Version: 6.0

cpe:2.3:a:redhat:virtualization:6.0
Siemens » Elan-8.2 » Version: N/A

cpe:2.3:a:siemens:elan-8.2:-
Siemens » Wincc Open Architecture » Version: 3.12

cpe:2.3:a:siemens:wincc_open_architecture:3.12
Splunk » Splunk » Version: 6.0.0

cpe:2.3:a:splunk:splunk:6.0.0
Splunk » Splunk » Version: 6.0.1

cpe:2.3:a:splunk:splunk:6.0.1
Splunk » Splunk » Version: 6.0.2

cpe:2.3:a:splunk:splunk:6.0.2
Intellian » V100 » Version: N/A

cpe:2.3:h:intellian:v100:-
Intellian » V60 » Version: N/A

cpe:2.3:h:intellian:v60:-
Ricon » S9922l » Version: 1.0

cpe:2.3:h:ricon:s9922l:1.0
Siemens » Application Processing Engine » Version: N/A

cpe:2.3:h:siemens:application_processing_engine:-
Siemens » Cp 1543-1 » Version: N/A

cpe:2.3:h:siemens:cp_1543-1:-
Siemens » Simatic S7-1500 » Version: N/A

cpe:2.3:h:siemens:simatic_s7-1500:-
Siemens » Simatic S7-1500t » Version: N/A

cpe:2.3:h:siemens:simatic_s7-1500t:-
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10
Canonical » Ubuntu Linux » Version: 13.10

cpe:2.3:o:canonical:ubuntu_linux:13.10
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0
Debian » Debian Linux » Version: 7.0

cpe:2.3:o:debian:debian_linux:7.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 19

cpe:2.3:o:fedoraproject:fedora:19
Fedoraproject » Fedora » Version: 20

cpe:2.3:o:fedoraproject:fedora:20
Intellian » V100 Firmware » Version: 1.20

cpe:2.3:o:intellian:v100_firmware:1.20
Intellian » V100 Firmware » Version: 1.21

cpe:2.3:o:intellian:v100_firmware:1.21
Intellian » V100 Firmware » Version: 1.24

cpe:2.3:o:intellian:v100_firmware:1.24
Intellian » V60 Firmware » Version: 1.15

cpe:2.3:o:intellian:v60_firmware:1.15
Intellian » V60 Firmware » Version: 1.25

cpe:2.3:o:intellian:v60_firmware:1.25
Opensuse » Opensuse » Version: 12.3

cpe:2.3:o:opensuse:opensuse:12.3
Opensuse » Opensuse » Version: 13.1

cpe:2.3:o:opensuse:opensuse:13.1
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server Aus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5
Redhat » Enterprise Linux Server Eus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_eus:6.5
Redhat » Enterprise Linux Server Tus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_tus:6.5
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Ricon » S9922l Firmware » Version: 16.10.3(3794)

cpe:2.3:o:ricon:s9922l_firmware:16.10.3(3794)
Siemens » Application Processing Engine Firmware » Version: 2.0

cpe:2.3:o:siemens:application_processing_engine_firmware:2.0
Siemens » Cp 1543-1 Firmware » Version: 1.1

cpe:2.3:o:siemens:cp_1543-1_firmware:1.1
Siemens » Simatic S7-1500 Firmware » Version: 1.5

cpe:2.3:o:siemens:simatic_s7-1500_firmware:1.5
Siemens » Simatic S7-1500t Firmware » Version: 1.5

cpe:2.3:o:siemens:simatic_s7-1500t_firmware:1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-0160

Products

Pricing

Contact Us